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IN THE UHITED STATES PATEHT AHD TRADEIMARK OFFICE 

Box Patent Application 

Assistant Commissioner for Patents 

Washington, D.C. 20231 

NEW APPLICATION TRANSMITTAL 



Transmitted lierewith for filing is tlie patent application of 
lnventor(s): Jukka VIALEN, Fabio LONGONI 

WARNING: 37 C.F.R. § 1.41(a)(1) points out 

"(a) A patent is applied for in the name or names of the actual inventor or Inventors. 

"(1) The inventorship of a nonprovisiortal application is tftat inventorship set forth in the oath or 
declaration as prescribed by § 1.63, except as provided for in § 1.S3(d)(4) and § 1.63(d). If an 
oath or declaration as prescribed by § 1.63 is not filed during the pendency of a nonpromional 
application, ttie Inventorship is that inventorship set forth in the application papers filed pursuant 
to § 1.53(b), unless a petition under this paragraph accompmied by the fee set forth in § 1.1 7(i) 
is filed supplying or changing Vie name or names of the inventor or inventors.' 



For (title): 



METHOD OF CIPHERING DATA TRANSMISSION IN A RADIO SYSTEM 



CERTiFICATiON UNDER 37 C.F.R. f 1.10* 
(Express Mail label number Is mmndrntory.) 
Express Mail certification is optional.) 

I hereby certify that this New Application Transmittal and the documents refened to as attached therein are being 

deposited with the United States Postal Service on this date March 6, 2000 envelope 

as -Express Mail Post Office to Addressee," mailing Label Number EL336863425US ad- 
dressed to the: Assistant Commissioner for Patents, Washington, D.C. 20231. 

Deborah J. Clark 

Wipe or print name of person mailing paper) 

Signature of person ij^iling paper 
WARNINQ: Certificate of mailing ^rst dass) or bcsimile transmission procedures of 37 C.F.R. § 1.8 cannot be 

used to obtain a date of mailing or transmission for this conespondence. 
•WARNING: Each paper or fee filed by 'Express Mail' muat have the number of the 'Express Mail' mailing /abe/ 

placed thereon prior to mailing. 37 C.F.R. § 1.10(b). 

'Since the fHing of correspondence under § 1.10 wiOwut the Express Mail mailing label tliereon 
is an oversight ffwf can be avoided by tfw axarorse of reasonMe care, requests for waiver of this 
requirement will not tie granted on petition.' Notice of Oct. 24, 1996,60 Fed. fleg. 56,439, at56,442. 
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1. Type of Application 

TTiis new application is for a{n) 

(check one applicable item below) 
& Original (nonprovislonal) 

□ Design 
□ Plant 

WARNING: Do not use this transmittal for a completion in the U.S. of an International Application under 35 
U.S.C. § 371(c)(4), unless the International Application is being filed as a divisional, continuation 
or continuation-in-part application. 

WARNING: Do not use this transmittal for the filing of a provisional application. 

NOTE: If one of the following 3 Items apply, then complete and attach ADDED PAGES FOR NEW APPLICATION 
TRANSMITTAL WHERE BENEFIT OF A PRIOR U.S. APPLICATION CLAIMED and a NOTIFICATION 
IN PARENT APPLICATION OF THE FILING OF THIS CONTINUATION APPLICATION. 

□ Divisional. 

□ Continuation. 

□ Continuation-in-part (C-l-P). 

2. Benefit of Prior U.S. AppHcatlon(s) (35 U.S.C. §§ 119(e), 120, or 121) 

NOTE: A nonprovislonal application may claim an invention disclosed in one or more prior filed copending 
nonprovisional applications or copending international applications designating the United States of 
America. In order for a nonprovisional application to claim the benefit of a prior filed copending 
nonprovisional application or copending international application designating the United States of 
America, each prior applica^on must name as an inventor at least one inventor named in the later filed 
nonprovisional application and disclose the named inventor's invention claimed in at least one claim 
of the later filed nonprovisional application in the manner provided by the first paragraph of 35 U.S.C. 
§ 112. Each prior application must also be: 

0) An international application entitled to a filing date in accordance with PCT Article 1 1 and 
designating the United States of America; or 

Cii) Complete as set forth in § 1.51(b): or 

(ill) Entitled to a filing date as set forth in § 1.S3(b) or § 1.53(d) and include the basic filing fee set 
forth in § 1.16; or 

Ov) Entitled to a filing date as set forth in § 1.53(b) and have paid therein the processing and retention 
fee set forth in § 1.21(1) within the time period set forth in § 1.53(f). 
37 C.F.R. § 1.78(a)(1). 

NOTE: If the new application being transmitted is a divisional, continuation or a continuation-in-part of a parent 
case, or where the parent case is an International Application which designated the U.S., or benefit 
of a prior provisional application Is claimed, then check the following Hem and complete and attach 
ADDED PAGES FOR NEW APPLICATION TRANSMITTAL WHERE BENEFfT OF PRIOR U.S. APPLICA- 
TION^) CLAIMED. 

WARNING: If an application claims the txnefit of the filing date of an earlier filed ^plication under 35 U.S.C. 

§§ 120. 121 or 365(c), the 20-year term of that application will be t>ased upon the Wing date of 
the earliest U.S. application that the application makes reference to under 35 U.S.C. §§ 120, 121 
or 365(c). (35 U.S.C. § 154(a)(2) does not take into account, for the determination of the patent 
term, any application on which priority is claimed under 35 U.S.C. §§ 1 19, 365(a) or 365(b).) For 
a c-i-p application, applicant should review whether any claim in the patent that will issue is 
supported by an eariier application and. if not, the applicant should constder canceling the reference 
to the earlier filed application. The term of a patent is not t>ased on a clalm-by-dalm approach. 
See Notice of April 14. 1995. 60 Fed. Reg. 20.195, at 20,205. 
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WARNING: When the last day of pendency of a provisional application falls on a Saturday. Sunday, or Federal 
holiday within the District of Columbia, any nonprovisional application claiming benefit of the 
provisional application must be filed prior to the Saturday, Sunday, or Federal holiday within the 
District of Columbia. See 37 C.F.R. § 1.78(a)(3). 

□ The new application being transmitted claims the benefit of prior U.S. applica- 
tion(s). Enclosed are ADDED PAGES FOR NEW APPLICATION TRANSMITTAL 
WHERE BENEFIT OF PRIOR U.S. APPLICATION(S) CLAIMED. 
3. Papers Enclosed 

A. Required for filing date under 37 C.F.R. § 1.53(b) (Regular) or 37 C.F.R. § 1.153 
(Design) Application 

_JZ_ Pages of specification 

_§ — Pages of claims 

— — Sheets of drawing 

WARNING: DO NOT submit original drawings. A high quality copy of the drawings should be supplied when 
filing a patent application. The drawings that are submitted to the Office must be on strong, white, 
smooth, and non-shiny paper and meet the standards according to § 1.84. If corrections to the 
drawings are necessary, they should be made to the original drawing and a high-quality copy of 
the convcted original drawing then submitted to the Office. Only one copy is required or desired. 
For^nments on proposed then-new 37 C.F.R. § 1.84, see Notice of Mare/j 9, 1988 (1990 O.G. 

NOTE: -Identifying Indicia, if provided, should Include the application number or the title of the Invention, 
inventor's name, docket number (if any), end the name and telephone number of a person to call if 
the Office is unable to match the drawings to the proper applicaVon. This information should be placed 
on the back of each sheet of drawing a minimum distance of 1.5 cm. (S/8 Inch) down from the top 
of the page . . .' 37 C.F.R. § 1.84(c)). 

(complete the following. If applicable) 

□ The enclosed drawing(s) are photograph(s), and there is also attached a 
"PETITION TO ACCEPT PHOTOGRAPH(S) AS DRAWING(S)." 37 C.F.R. 
§ 1.84(b). 

□ formal 

□ Informal 

B. Other Papers Enclosed 

_Z_ Pages of declaration and power of attorney 

— L_ Pages of abstract 

Other 

4. Additional papers enciosed 

□ Amendment to claims 

□ Cancel in this applications claims before 

calculating the filing fee. (At least one original Independent claim must be 
retained for filing purposes.) 

□ Add the claims shown on the attached amendment. (Claims added have 
been numbered consecutively following the highest numbered original 
claims.) 

Preliminary Amendment 

Information Disclosure Statement (37 C.F.R. § 1.98) 
Fomi PTO-1449 {PTO/SB/08A and 08B) 
Citations 
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□ Declaration of Biological Deposit 

□ Submission of "Sequence Listing," computer readable copy and/or amendment 
pertaining thereto for biotechnology invention containing nucleotide and/or 
amino acid sequence. 

□ Authorization of Attomey(s) to Accept and Follow Instructions from Representa- 
tive 

□ Special Comments 

□ Other 

5. Declaration or oath (Including power of attorney 

NOm A newly executed dedaration is not required in a continuation or di^nsional application provided that 
the prior nonpro\isionat application contained a dedaration as required, the application being filed is 
by all or fewer than all the inventors named in the prior application, there is no new matter in the 
^plication being filed, and a copy of tfie executed declaration filed In the prior application (showing 
the signature or an indication tiiereon tiiat it was signed) is submitted. The copy must be accompanied 
by a statement requesting deletion of the names ofpersonfs) who are not inventors of the application 
being filed. If the declaration in the prior application was Hied under § 1.47, then a copy of that 
declaration must be filed accompanied by a copy of the decision granting § 1.47 status or. if a nonsigning 
person under § 1.47 has subsequentiy joined in a prior application, tiien a copy of Oie subsequently 
executed declaration must be filed. See 37 C.F.R. §§ 1.63(dX1H3). 

NOTE: A declaration filed to complete an application must 6e executed, identify tf» specification to which it 
is directed, identify each inventor by full name including family name and at least one given name, without 
abbreviation together with any other given name or initial, and the residence, post office address and 
country or cHizenship of each inventor, and state wheOier the inventor is a sole or joint inventor 37 
C.F.R. § 1.63(a}(1H4). 

0 Enclosed 
Executed by 

(check all applicable boxes) 

O inventor{s). 

□ legal representative of inventor(s). 
37 C.F.R. §§ 1.42 or 1.43. 

□ joint inventor or person showing a proprietary 
interest on behalf of inventor who refused to sign 
or cannot be reached. 

□ This is the petition required by 37 C.F.R. § 1 .47 and the statement 
required by 37 C.F.R. § 1.47 is also attached. See item 13 below 
for fee. 

□ Not Enclosed. 

NOTE: Where the filing is a completion in the U.S. of an International Application or vfhere Oye completion of 
the U.S. ^plication contains subi'ect matter in addition to tiie International Application, tiie application 
may be treated as a continuation or continuation-in-part, as tiie case may be. utilizing ADDED PAGE 
FOR NEW APPLICATION TRANSMITTAL WHERE BENEFTT OF PRIOR U.S. APPLICATION CLAIMED. 

□ Application is made by a person authorized under 37 C.F.R. § 1.41(c) on 
behalf of a// the above named inventor(s). 

(The declaration or oath, along with the surcharge required by 37 C.F.R. § 1.16(e) 
can be filed subsequently). 

□ Showing that the filing is authorized. 

(not required unless called into question. 37 C.F.R. § 1.41(d)) 
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6. Inventorship Statement 



WARNINO: If the named inventors are each not the inventors of all the claims an explanation, including the 
ownership of the various claims at the time the last claimed invention was made, should be 
subimitted. 

The inventorship for all the claims in this application are: 

□ The same. 

or 

□ Not the same. An explanation, including the ownership of the various claims at 
the time the last claimed invention was made, 

□ is submitted. 

□ wilt be submitted. 

7. Language 

NOTE: An application including a signed oath or declaration may be fried in a language other than English. 
An English translation of the non-English language application and the processing fee of $130.00 
required by 37 C.F.R. § 1. 1704 « required to be filed with the application, or within such time as may 
be set by the Office. 37 C.F.R. § 1.52(d). 

a English 

□ Non-English 

□ The attached translation includes a statement that the translation is accu- 
rate. 37 C.F.R. § 1.52(d). 

8. Assignment 

Ca An assignment of the invention to Nokia Mobile Phones Ltd. 



m is attached. A separate S "COVER SHEET FOR ASSIGNMENT (DOCU- 
MENT) ACCOMPANYING NEW PATENT APPLICATION" or □ FORM PTO 
1595 is also attached. 

□ will follow. 

NOTE: 'If an assignment is submitted with a new application, send two separate letters-one for the application 

and one for the assignment." Notice of May 4, 1990 (1114 O.G. 77-78). 
WARNING: A newly executed "CERTIFICATE UNDER 37 C.F.R. § 3.73 fi)" must be filed when a continuation- 
in-part application is filed by an assignee. Notice of April 30, 1993, 1150 O.G. 62-64. 
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9. Certified Copy 

Certified copy(ies) of appllcation(s) 



Country 


Appln. No. 


Filed 


Finland 


990500 


8 March 1999 


Country 


Appln. No. 


Filed 



Country Appln. No. Filed 

from which priority is claimed 
O is (are) attached. 
□ will follow. 

NOTE: The fomign application forming the basis for the claim for priority must be referred to In the oath or 

declamtlon. 37 CER. § 1.55(^ and 1.63. 
NOTE: This item Is for any foreign priority for which the application being filed directly re/afes. if any parent 

U.S. application or International Application from wNch this application claims benefit under 35 U.S.C. 

§ 120 Is itself entitted to priority from a prior foreign application, then complete item 18 on the ADIXD 

PAGES FOR NEW APPLICATION TRANSMITTAL WHERE BENEFfT OF PRIOR U.S. APPLICATION(S) 

CLAIMED. 

10. Fee CalcuiaUon (37 C.F.R. § 1.16) 
A. ^ Regular application 



CUMMS AS FILED 


Number filed 




Number Extra 


Rate 


Basic Fee 
37 C.F.R. § 1.16(a) 

$ 690.00 


Total 

Claims (37 C.F.R. 
§ 1.16(c)) 


45 _ 20 


= 25 X 


$ 18.00 


450.00 


Independent 
Claims (37 C.F.R. 
§ 1.16(b)) 


3 - 3 


0 X 


$ 78.00 


0 


Multiple dependent claim(s), 
if any (37 C.F.R. § 1.16(d)) 


+ 


$260.00 





□ Amendment cancelling extra claims Is enclosed. 

□ Amendment deleting multiple-dependencies is enclosed. 

□ Fee for extra claims is not being paid at this time. 

NOTE: If the fees for extra claims are not paid on filing they must be paid or the claims canceled by amendment, 
prior to the expiration of the time period set for response by the Patent and Trademark Office in any 
notice of fee deficiency. 37 C.F.R. § 1.16(d)- 

Filing Fee Catcuiation $ 

B. □ Design application 

($310.00—37 C.F.R. § 1.16(f)) 

Filing Fee Calculation $ 

C. □ Plant application 

($480.00—37 C.F.R. § 1.16(g)) 

Filing fee calculation $ 
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11. Small Entity Statement(s) 

□ Statement(s) that this is a filing by a small entity under 37 C.F.R. § 1 .9 and 1 .27 
is (are) attached. 

WARNINQ: "Status es a small entity must be specifically established in each application or patent In which 
the status is available and desired. Status as a small entity In one application or patent does not 
affect any other application or patent, including applications or patents which are directly or 
Indirectly dependent upon the application or patent In which the status has been established. The 
lefiling of an application under § 1.53 as a continuation, division, or continuation-in-part finduding 
a continued prosecution application under § 1.53(d)), or the filing of a reissue application requires 
a new determination as to continued entitlement to small entity status for the continuing or reissue 
application. A nonprovisional application dalming benem under 35 U.S.C. § 119(e), 120. 121. or 
365(c) of a prior application, or a reissue application may rely on a statement filed In the prior 
application or in the patent if the nonprovisional application or the reissue application includes a 
reference to the statement in the prior application or in the patent or includes a copy of the 
statement in the prior application or in the patent and status as a small entity is still proper and 
desimd. The payment of the small entity basic statutory filing fee will be treated as such a reference 
for purposes of this section." 37 C.F.R. § 1.28(^(2). 

WARNING: 'Small entity status must not be established when the person or persons signing the. . . statement 
can unoquhfocBlly make the required self-certHication." M.P.E.P.. § 509.03. 6th ed., rev. 2, July 
1996 (empha^s added). 

(complete the following, if applicable) 

□ Status as a small entity was claimed in prior application 

/ , filed on , from which benefit 

is being claimed for this application under. 
35 U.S.C. § □ 119(e). 

□ 120. 

□ 121. 

□ 365(c). 

and which status as a small entity is still proper and desired. 
□ A copy of the statement In the prior application is included. 
Filing Fee Calculation (50% of A, B or C above) 

$ 

NOTE: Any excess of the full fee paid will be refunded if small entitiy status is established and a refund request 
are filed within 2 months of the date of timely payment of a full fee. The two-month period is not 
extendable under § 1.136. 37 C.F.R. § 1.28(a)- 

12. Request for International-Type Search (37 C.F.R. § 1.104(d)) 

(complete, if applicable) 

□ Please prepare an international-type search report for this application at the time 
when national examination on the merits takes place. 
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13. Fee Payment Being Made at This Time 

□ Not Enclosed 

□ No filing fee is to be paid at this time. 

(This and the surcharge required by 37 C.F.R. § 1.16(e) can be paid 

subsequently.) 
Q Enclosed 

□ Filing fee $ _ia40^^oo_ 

Recording assignment 

($40.00; 37 C.F.R. § 1.21(h)) 

(See attached "COVER SHEET FOR 

ASSIGNMENT ACCOMPANYING NEW 

APPLICATION".) $ _40^0Q 

□ Petition fee for filing by other than all the 
inventors or person on behalf of the inventor 
where inventor refused to sign or cannot be 
reached 

($130.00; 37 C.F.R. §§ 1.47 and 1.17(1)) $ 

□ For processing an application with a 
specification in 

a non-English language 

($130.00; 37 C.F.R. §§ 1.52(d) and 1.1 7{k)) $ 

□ Processing and retention fee 

($130.00; 37 C.F.R. §§ 1.53(d) and 1.21(1)) $ 

□ Fee for international-type search report 

($40.00; 37 C.F.R. § 1.21(e)) $ 



NOTE: 37 C.F.R. § 1.21§ establishes a fee for processing and retaining any application that is abandoned for 
failing to complete the application pursuant to 37 C.F.R. § 1.53^ and this, as well as the changes to 
37 C.F.R. §§ 1.53 and 1.7a(aX1), indicate that In onder to obtain the benefit of a prior U.S. application, 
either the basic filing fee must be paid, or the processing and retention fye of § 1.210) "lust be paid, 
within 1 year from notification under § 53(0. 

Total fees enclosed $ 



Method of Payment of Fees 

H Check in the amount of $_ 



1,180.00 



□ Charge Account No. in the amount of 

$ 

A duplicate of this transmittal is attached. 

/VOTE; Fees should be itemized in such a manner that it is clear for which puipose the fees are paid. 37 C.F.R. 
§ 1.22(b). 
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15. Authorization to Charge Additional Fees 
WARNING: If no fees am to be paid on filing, the following Hems should not be completed. 
WMNINQ: Accumtely count daims. especi^ly multiple dependent dams, to avoid une^tpected high charges, 
if extra daim d^arges are authorized. 
IxJ The Commissioner is hereby authorized to charge the following additional fees 
by this paper and during the entire pendency of this application to Account No, 
16-1350 : 



B 37 C.F.R. § 1.16(a), (Q or (g) (filing fees) 
B 37 C.F.R. § 1.16(b). (c) and (d) (presentation of extra claims) 
NOTE: Because additional fees for excess or multiple dependent clams not paid on filing or on later presentation 
must only be paid or these claims cancelled by amendment prior to the expiration of the time period 
set for response by the PTO in any notice of fee deficiency (37 C.F.R. § 1.16(d)), it m'Shf be best not 
to authorize the PTO to charge additional daim fees, except possibly when dealing with amendments 
after final acfton. 

M 37 C.F.R. § 1 .16(e) (surcharge for filing the basic filing fee and/or declaration 

on a date later than the filing date of the application) 
E3 37 C.F.R. § 1.17(a)(1)-<5) (extension fees pursuant to § 1.136(a)). 

□ 37 C.F.R. § 1.17 (application processing fees) 

NOTE; . .A written request may be submitted in an application that is an authorization to treat any concurrent 
or future reply, requiring a petition for an extension of time under this paragraph for its timely submission, 
as incorpomting a petition for extension of time for the appropriate length of time. An authorization to 
charge all mquired fees, fees under § 1.17, or all required extension of time fees will be tmated as a 
constnjctive petition for an extmsion of time In any concurrent or future reply requiring a petition for 
an extension of time under this paragraph for its timely submission. Submission of the fee set forth in 
§ 1.17(a) will also be treated as a constructive petition for an extension of time in any concunent reply 
requiring a petition for en extension of time under this paragraph for its timely submission." 37 C.F.R. 
§ 1.136(a)(3}. 

□ 37 C.F.R. § 1.18 (issue fee at or before mailing of Notice of Allowance, 
pursuant to 37 C.F.R. § 1.311(b)) 

WOTF; Whem an authorization to charge tiie issue fee to a depost account has been filed before Uie mailing 
of a Notice of Allowance, the issue fee will be automatically charged to Vie deposit account at tiie time 
of mailing tiie notice of allowance. 37 C.F.R. § 1.311(b). 

NOTE: 37 C.F.R. § 1.28^) requires 'Notification of any change In status resulting In loss of entitlement to small 
entity status must be filed in the application . . . prior to paying, or at the time of paying, . . . the issue 
fee. . . • From the wording of 37 C.F.R. § 1.28(b), (ej notification of change of status must be made 
even if the fee is paid as 'other than a small entity" and (b) no notification is required if tiie change 
Is to another small entity. 
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16. Instructions as to Overpayment 

NOTE: '. . . Amounts of twenty-five dotlan or less wUI not be returned unless spedficany requested within 
a reasonable time, nor will Oie payer be notified of such amounts; amounts over twenty-five dollars may 
be returned by check or. If requested, by credit to a d^xtsrf account' 37 C.F.R. § 1.26(a). 

B Credit Account No 16-1350 

□ Refund 



^END ALL CORRESPONDENCE TO: 




Reg. No. 24,622 



Clarence A. Green 



(type or print name of attorney) 



Tel. No. ( 203 ) 259-1800 



PERMAH & GREEN, LLP 



P.O. Address 



Customer No. 



425 Post Road, Fairfield, Connecticut 06430 
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Incorporation by reference of added pages 

(check the following item If the application in this transmittal claims the benefit of 
prior U.S. application(s) (including an international application entering the U.S. 
stage as a continuation, divisional or C-l-P application) and complete and attach 
the ADDED PAGES FOR NEW APPLICATION TRANSMITTAL WHERE BENEFIT OF 
PRIOR U.S. APPLICATION(S) CLAIMED) 

□ Plus Added Pages for New Application Transmittal Where Benefit of Prior U.S. 
Appiication(s) Claimed 

Number of pages added — _— — 



Plus Added Pages for Papers Referred to in Item 4 Above 

Number of pages added 



□ Plus added pages deleting names of inventor(s) named in prior application(s) 
who is/are no longer inventor(s) of the subject matter claimed in this application. 

Number of pages added __ 

□ Plus "Assignment Cover Letter Accompanying New Application" 

Number of pages added . — 

Statement Where No Further Pages Added 

fif no further pages form a part of this Transmittal, then end this Transmittal with 
this page and check the following Item) 
B This transmittal ends with this page. 
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1 

METHOD OF CIPHERING DATA TRANSMISSION IN A RADIO SYSTEM 

FIELD OF INVENTION 

The invention relates to a method of ciphering data transmission in 
a radio system. 

5 BACKGROUND OF INVENTION 

Ciphering is today used in many data transmission systems to 
prevent the data transmitted from falling into the hands of an unauthorized 
user. The ciphering has grown in significance in the past few years, particularly 
as wireless telecommunication has become more common. 

10 The ciphering can be performed, for example, by encrypting the 

information to be transmitted in a transmitter, and by decrypting the 
information in a receiver. In the encryption means the information to be 
transmitted, for example a bit stream, is multiplied by a certain number of 
encryption bit patterns, whereby it is difficult to find out what the original bit 

15 stream was if the encryption bit pattern used is unknown. 

In a digital GSM system, for example, ciphering is performed on the 
radio path: a ciphered bit stream to be transmitted onto the radio path is 
formed by XORing data bits with ciphering bits, the ciphering bits being formed 
by an algorithm known per se (the A5 algorithm), using a ciphering key Kc. 

20 The A5 algorithm encrypts the information transmitted on the traffic channel 
and the DCCH control channel. 

The ciphering key Kc is set when the network has authenticated the 
terminal but the traffic on the channel has not yet been ciphered. In the GSM 
system the terminal is identified on the basis of the International Mobile 

25 Subscriber Identity IMSI, which is stored in the terminal, or the Temporary 
Mobile Subscriber Identity TMSI, which is formed on the basis of the 
subscriber identity. A subscriber identification key Ki is also stored in the 
terminal. A terminal identification key is also known to the system. 

In order that the ciphering would be reliable, information on the 

30 ciphering key Kc must be kept secret. The cipher key is therefore transmitted 
from the network to the terminal indirectly. A Random Access Number RAND 
is formed in the network, and the number is then transmitted to the terminal via 
the base station system. The ciphering key Kc is formed by a known algorithm 
(the A5 algorithm) from the random access number RAND and the subscriber 



identification key Ki. The cipliering key Kc is computed in the same way both 
in the terminal and in the network part of the system. 

In the beginning, data transmission on a connection between the 
terminal and the base station is thus not ciphered. The ciphering does not start 
5 until the base station system sends the terminal a cipher mode command. 
When the terminal has received the command, it starts to cipher data to be 
sent and to decipher received data. Correspondingly, the base station system 
starts to decipher the received data after sending the cipher mode command 
and to cipher the sent data after the reception and successful decoding of the 

10 first ciphered message from the terminal. In the GSM system the cipher mode 
command comprises a command to start ciphering, and information on the 
algorithm to be used. 

The problem in the known methods is that they have been designed 
for the present systems, wherefore they are inflexible and not suited for the 

15 ciphering of data transmission in new systems, where several parallel services 
for one mobile station are possible. If we use the same ciphering mask twice 
for two or more parallel protocol data units that will be sent using the same air 
interface frame, then an eavesdropper may deduce a lot of information from 
the data streams. The amount of information that can be deduced depends on 

20 the structure of the data streams. From random data that has no structure one 
cannot obtain any information, but usually there is a structure in the data, 
especially in the signaling data. 

BRIEF DESCRIPTION OF INVENTION 

It is an object of the invention to provide a method, and a user 

25 equipment and a radio network subsystem implementing the method, solving 
the above problems. This is achieved with a method of ciphering data 
transmission in a radio system, comprising: generating a ciphering key; 
producing a ciphering mask in a ciphering algorithm using the ciphering key as 
an input parameter; producing ciphered data by applying the ciphering mask to 

30 plain data. Using a logical channel specific parameter or a transport channel 
specific parameter as an additional input parameter to the ciphering algorithm. 

The invention also relates to a user equipment, comprising: 
generating means for generating a ciphering key; a ciphering algorithm 
connected with the generating means for producing a ciphering mask using 

35 the ciphering key as an input parameter; ciphering means connected with the 



ciphering algorithm for producing ciphered data by applying the ciphering 
mask to plain data. The ciphering algorithm uses a logical channel specific 
parameter or a transport channel specific parameter as an additional input 
parameter. 

The invention further relates to a radio network subsystem, 
comprising: generating means for generating a ciphering key; a ciphering 
algorithm connected with the generating means for producing a ciphering 
mask using the ciphering key as an input parameter; ciphering means 
connected with the ciphering algorithm for producing ciphered data by 
applying the ciphering mask to plain data. The ciphering algorithm uses a 
logical channel specific parameter or a transport channel specific parameter as 
an additional input parameter. 

The preferred embodiments of the invention are claimed in the 
dependent claims. 

Several advantages are achieved with the invention. In the solution 
of the present invention, ciphering and its properties can be flexibly controlled. 
The present invention enhances user security in new radio systems. This 
solution is also better than the known technique, which uses a long enough 
ciphering mask only once for each air interface frame, because it allows 
distributed implementation of the needed functionality in the protocol stack. 

BRIEF DESCRIPTION OF FIGURES 

In the following the invention will be described in greater detail by 
means of preferred embodiments and with reference to the attached drawings, 
in which 

Figures 1A and 1B illustrate an example of a mobile telephone 

system; 

Figure 2A illustrates a transmitter and a receiver; 

Figure 2B illustrates transport channel coding and multiplexing; 

Figure 3 illustrates a frame structure; 

Figures 4A, 4B and 4C show a block diagram of a ciphering 
environment according to the invention; 

Figure 5 illustrates a mobile station 

Figure 6 is a flow diagram illustrating a method according to the 

invention; 

Figure 7A illustrates an example of a protocol stack; 
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Figure 7B illustrates an example of a protocol stack according to the 

invention; 

Figure 7C illustrates mapping between logical channels and 
transport channels; 

5 Figure 8 illustrates the structure of a Medium Access Control Layer 

Protocol Data Unit. 

DETAILED DESCRIPTION OF INVENTION 

The present invention can be used in different mobile telephone 

systems. In the following examples, the use of the invention is described in the 
10 Universal Mobile Telephone System (UMTS) without restricting the invention 

to it. The examples illustrate the FDD (Frequency Division Duplex) operation of 

the UMTS, but do not restrict the invention to it. 

With reference to Figures 1A and 1B, a typical mobile telephone 

system structure will be described. Figure 1B only comprises the blocks that 
15 are essential for the description of the invention, although it is apparent to a 

person skilled in the art that a common mobile telephone system also 

comprises other functions and structures, which need not be discussed in 

greater detail here. The main parts of the mobile telephone system are: a core 

network CN, a UMTS terrestrial radio access network UTRAN, and a user 
20 equipment UE. The interface between the CN and the UTRAN is called the lu 

interface, and the interface between the UTRAN and the UE is called the Uu 

interface. 

The UTRAN is composed of radio network subsystems RNS. The 
interface between two RNSs is called the lur interface. The RNS is composed 
25 of a radio network controller RNC and one or more node Bs B. The interface 
between the RNC and the node B is called the lub interface. The reception 
area of the node B, i.e. cell, is denoted in Figure 1A by C. 

As the presentation in Figure 1A is very abstract, it is clarified in 
Figure 1B by setting forth the parts of the GSM system that correspond to the 
30 parts of the UMTS. It is clear that the presented mapping is by no means a 
binding one but an approximation, because the responsibilities and functions 
of the parts of the UMTS are still being planned. 

Figure IB illustrates a packet switched transmission via Internet 102 
from a computer 100 connected with the mobile telephone system to a 
35 portable computer 122 connected with a user equipment UE. The user 



equipment UE may be a fixedly mounted wireless local loop terminal, a 
vehicle-mounted terminal or a hand-held portable terminal, for example. 

The infrastructure of the radio network UTRAN is composed of radio 
network subsystems RNS, i.e. base station subsystems. The radio network 
5 subsystem RNS is composed of a radio network controller RNC, i.e. a base 
station controller, and at least one node B, i.e. a base station, under the 
control of the RNC. 

The node B comprises a multiplexer 114, transceivers 116, and a 
control unit 118 which controls the operation of the transceivers 116 and the 
10 multiplexer 114. The multiplexer 114 arranges the traffic and control channels 
used by a plurality of transceivers 116 on a single transmission connection 
lub. 

The transceivers 116 of the node B have a connection to an 
antenna unit 120 which is used for providing a bi-directional (or sometimes 

15 one-way) radio connection Uu to a user equipment UE. The structure of the 
frames transmitted on the radio connection Uu is determined in detail and the 
connection is referred to as an air interface. 

The radio network controller RNC comprises a group switching field 
110 and a control unit 112. The group switching field 1 10 is used for switching 

20 speech and data and for connecting signaling circuits. The node B and the 
radio network controller RNC form a base station subsystem, which 
additionally comprises a transcoder, also known as a speech codec, or TRAU 
(Transcoder and Rate Adapter Unit) 108. 

The division of the functions and the physical structures of the radio 

25 network controller RNC and the node B may differ according to the actual 
realization of the radio network subsystem. Typically, the node B implements 
the radio connection. The radio network controller RNC typically manages the 
following: radio resource control, inter-cell handover control, power control, 
timing and synchronization, and paging for user equipment. 

30 The transcoder 108 is usually located as close to a mobile switching 

center 106 as possible because this allows speech to be transmitted between 
the transcoder 108 and the radio network controller RNC in a cellular radio 
network form, which saves transmission capacity. 

The transcoder 108 converts different digital speech coding modes 

35 used between a public switched telephone network and a cellular radio 
network to make them compatible, for instance from the 64 kbit/s fixed network 



form to another form (such as 13 kbit/s) of the cellular radio network, and vice 
versa. Naturally, the transcoding is carried out only for speech. The control 
unit 112 carries out call control, mobility management, collection of statistical 
data and signaling. 

5 The core network CN is composed of the infrastructure belonging to 

the mobile telephone system which is not part of the UTRAN. Figure 1B 
illustrates two equipments, which are part of the core network CN, namely a 
mobile switching center 106, and a gateway mobile switching center 104, 
which handles mobile telephone system interfaces towards the outside world, 

10 in this example towards the Internet 102. 

Figure 5 illustrates an exemplary structure of the user equipment 
UE. The essential parts of the user equipment UE are: an interface 504 to the 
antenna 502 of the user equipment UE, a transceiver 506, a control part 510 
of the user equipment UE, an interface 512 to the battery 514, and a user 

15 interface comprising a display 500, a keyboard 508, a microphone 516 and a 
speaker 518. 

Figure 2A illustrates the functioning of a radio transmitter/radio 
receiver pair. The radio transmitter may be located in the node B or in the user 
equipment. Correspondingly the radio receiver may be located in the user 

20 equipment or in the node B. 

The upper portion of Figure 2A illustrates the essential functionality 
of the radio transmitter. Different services placed in a physical channel are, for 
example, speech, data, moving or still video picture, and the control channels 
of the system that are processed in the control part 214 of the radio 

25 transmitter. The control part 214 is related to the control of the equipment itself 
and to the control of the connection. Figure 2A illustrates manipulation of two 
different transport channels 200A, 200B. Different services call for different 
source encoding equipment: speech for example calls for a speech codec. For 
the sake of clarity, source encoding equipment is not, however, presented in 

30 Figure 2A. 

First the logical channels are ciphered in blocks 21 6A, 21 6B. In the 
ciphering, ciphered data is produced by applying a ciphering mask to plain 
data. Then the ciphered data is placed in the transport channel in blocks 200A, 
200B, As later will be explained with reference to Figures 4A, 4C and 7B the 
35 ciphering can be performed either for a logical channel or for a transport 
channel. Different channels are then channel encoded in blocks 202A and 



202B. One form of channel coding is different block codes, one example of 
which is a cyclic redundancy check, or CRC. Another typical way of performing 
channel coding is convolutional coding and its different variations, such as 
punctured convolutional coding and turbo coding. 
5 Having been channel encoded, the channels are interleaved in an 

interleaver 204A, 204B. The object of the interleaving is to make error 
correction easier. In the interleaving, the bits are mixed with each other in a 
predetermined fashion, so that transitory fading on the radio path does not 
necessarily make the transferred information unidentifiable. 

10 Different signals are multiplexed in block 208 so that they can be 

sent using the same transmitter. 

The interleaved encrypted bits are then spread with a spreading 
code, scrambled with a scrambling code, and modulated in block 206, whose 
operation is described in detail in Figure 2B. 

15 Finally, the combined signal is conveyed to the radio frequency 

parts 210, which may comprise power amplifiers and bandwidth restricting 
filters. An analog radio signal is then transmitted through an antenna 212 to 
the radio path Uu. 

The lower portion of Figure 2A illustrates the typical functionality of 

20 a radio receiver. The radio receiver is typically a Rake receiver. The analog 
radio signal is received from the radio path Uu by an antenna 234. The 
received signal is conveyed to radio frequency parts 232, which comprise a 
filter that blocks the frequencies outside the desired frequency band. A signal 
is then converted in a demodulator 228 into an intermediate frequency or 

25 directly into baseband, and in this form the signal is sampled and quantized. 

Because the signal in question is a multipath propagated signal, 
efforts are made to combine the signal components propagated on different 
multipaths in block 228, which comprises several Rake fingers. 

In a so-called rowing Rake finger, delays for the different multipath 

30 propagated signal components are searched. After the delays have been 
found, different Rake fingers are allocated for receiving each of the multipath 
propagated signals by correlating the received signal with the used spreading 
code delayed with the found delay of that particular multipath. The different 
demodulated and despread multipaths of the same signal are then combined 

35 in order to obtain a stronger signal. 

The received physical channel is then demultiplexed in a 



demultiplexer 224 into data streams of different cliannels. The channels are 
then directed each to a de-interleaver 226A, 226B, where the received 
physical channel is then de-interieaved. After that the physical channels are 
processed in a specific channel decoder 222A, 222B, where the channel 
5 coding used in the transmission is decoded. Convolutionai coding is 
advantageously decoded with a Viterbi decoder. After this the transport 
channels are mapped to the logical channels in blocks 200A, 200B, or the 
other possibility is that the deciphering is performed for the transport channels. 
The channel decoded channels (logical or transport) are deciphered in blocks 
10 220A, 220B by applying a ciphering mask to the received data. Each received 
logical channel can be further processed, for example, by transferring the data 
to the computer 122 connected with the user equipment UE. The control 
channels of the system are conveyed to the control unit 236 of the radio 
receiver. 

15 Figure 2B illustrates how the transport channels are coded and 

multiplexed. In principle, Figure 2B is in part the same as Figure 2A but seen 
from another perspective. In blocks 240A, 240B a Cyclic Redundancy Check 
is added to each Transport Block. Interleaving is performed in two stages, in 
blocks 242A, 242B and 246. When two or more services having different 

20 quality of service requirements are multiplexed into one or more physical 
channels, then service specific rate matching 244 is used. In rate matching the 
channel symbol rates are adjusted to an optimum level, where the minimum 
quality of service requirement of each service is fulfilled with the same channel 
symbol energy. Mapping of the transport channels to physical channels is 

25 performed in block 248. 

As the ciphering is the key issue in the current invention, its 
principle will be next described in more detail. In Table 1 the first row 
represents the plain data bits that have to be transmitted to the recipient. The 
bits on the second row constitute a ciphering mask. The ciphering mask is 

30 applied to the plain data, usually by using the exclusive-or operation, i.e. XOR. 
The resulting ciphered data is on the third row. This ciphered data is sent 
through the air interface to the recipient. The recipient then performs 
deciphering by applying the same ciphering mask that has been used in the 
transmitter to the received data. The fourth row is a ciphering mask that is 

35 summed with the third row by using the XOR operation. The resulting 
recovered data is presented on the fifth row. As we will see, the recovered 



data is the same as the plain data. 
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Table 1 

Figure 3 shows an example of a frame structure used on a physical 
channel. Frames 340A, 340B, 340C, 340D are given a running number from 
one to seventy-two, and they form a 720-millisecond long super frame. The 
length of one frame 340C is ten milliseconds. The frame 340C is divided into 
sixteen slots 330A, 330B, 330C, 330D. The length of slot 330C is 0.625 
milliseconds. One slot 330C corresponds typically to one power control period, 
during which the power is adjusted for example by one decibel up or down. 

The physical channels are divided into different types, including 
common physical channels and dedicated physical channels. 

The common physical channels are used to carry the following 
transport channels: PCH, BCH, RACH and FACH. 

The dedicated physical channels consist of dedicated physical data 
channels (DPDCH) 310 and dedicated physical control channels (DPCCH) 
312. The DPDCHs 310 are used to carry data 306 generated in layer two of 
the OSI (Open Systems Interconnection) model and layers above it, i.e. dedi- 
cated control channels (DCH). The DPCCHs 312 carry the control information 
generated in layer one of the OSI model. Control information comprises: pilot 
bits 300 used in channel estimation, feedback information (FBI) 308 transmit 
power-control commands (TPC) 302, and optionally a transport format 
combination indicator (TFCI) 304. The TFCi 304 tells the receiver the transport 
formats of different transport channels, i.e. Transport Format Combination, 
used in the current frame. 

As can be seen from Figure 3, the down-link DPDCHs 310 and 
DPCCHs 312 are time multiplexed into the same slot 330C. In the up-link the 
channels are sent in parallel so that they are IQ/code multiplexed (I = in- 
phase, Q = quadrature) into each frame 340C. 
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The channels in the radio interface Uu are processed according to a 
protocol architecture comprising, according to the ISO (International 
Standardization Organization) OSI (Open Systems Interconnection) model, 
three protocol layers: a physical layer (= layer one), a data link layer (= layer 
5 two), and a network layer (= layer three). The protocol stacks are located both 
in the radio network subsystem RNS and in the user equipment UE. Each unit 
(e.g. user equipment, or radio network subsystem) has a layer which is in 
logical communication with a layer of another unit. Only the lowest, physical 
layers communicate with each other directly. The other layers always use the 

10 services offered by the next, lower layer. The message must thus physically 
pass in the vertical direction between the layers, and only in the lowermost 
layer the message passes horizontally between the layers. Figure 7A 
illustrates the layers of the protocol architecture. The ovals between different 
sub-layers indicate service access points (SAP). 

15 The physical layer LI offers different transport channels to the MAC 

sub-layer MAC and higher layers. The physical layer transport services are 
described by how and with what characteristics data is transferred over the 
radio interface. The transport channels include a Paging Channel PCH, 
Broadcast Channel BCH, Synchronization Channel SCH, Random Access 

20 Channel RACH, Forward Access Channel FACH, Down-link Shared Channel 
DSCH, Fast Up-link Signaling Channel FAUSCH, and Dedicated Channel 
DCH. The physical layer L1 maps transport channels with physical channels. 
In the FDD (Frequency Division Duplex) mode a physical channel Is 
characterized by the code, frequency and, in the up-link, the relative phase 

25 (l/Q). In the TDD (Time Division Duplex) mode the physical channel is also 
characterized by the time slot. 

The transport channels may be divided Into common channels 
(where there is a need for in-band identification of the UEs when particular 
UEs are addressed) and dedicated channels (where the UEs are identified by 

30 the physical channel, i.e. code and frequency for the FDD and code, time slot 
and frequency for the TDD). 

The common transport channel types are as follows. The RACH is a 
contention based up-link channel used for transmission of a relatively small 
amount of data, for example of initial access or non-real-time dedicated 

35 control or traffic data. The FACH is a common down-link channel without 
closed-loop power control used for transmission of a relatively small amount of 



data. The DSCH is a down-link cinannel shared by several UEs carrying 
dedicated control or traffic data. The BCH is a down-linl< channel used for 
broadcasting system information to an entire cell. The SCH is a down-link 
channel used for broadcasting synchronization information to an entire cell in 
5 the TDD mode. The PCH is a down-link channel used for broadcasting control 
information to an entire cell allowing efficient UE sleep mode procedures. 

The dedicated transport channel types, in turn, are as follows. The 
DCH is a channel dedicated to one UE used in up-link or down-link. The 
FAUSCH is an up-link channel used to allocate dedicated channels in 

10 conjunction with the EACH. The data link layer is divided into two sub-layers: a 
MAC sub-layer (Medium Access Control) and a RLC sub-layer (Radio Link 
Control). The MAC sub-layer L2/MAC offers different logical channels to the 
RLC sub-layer L2/RLC. The logical channel is characterized by the type of 
information that is transferred. The logical channels include a Paging Control 

15 Channel PCCH, Broadcast Control Channel BCCH, Synchronization Control 
Channel SCCH, Common Control Channel, Dedicated Control Channel DCCH 
and Dedicated Traffic Channel DTCH. 

The control channels are used for transfer of control plane 
information only. The SCCH is a down-link channel for broadcasting 

20 synchronization information in case of TDD (Time Division Duplex) operation. 
The BCCH is a down-link channel for broadcasting system control information. 
The PCCH is a down-link channel that transfers paging information. The 
CCCH is a bi-directional channel for transmitting control information between 
the network and the UEs. This channel is commonly used by the UEs having 

25 no RRC connection with the network. The DCCH is a point-to-point bi- 
directional channel that transmits dedicated control information between the 
UE and the network. This channel is established through an RRC connection 
setup procedure. 

The traffic channels are used for the transfer of user plane 
30 information only. The DTCH is a point-to-point channel, dedicated to one UE, 
for the transfer of user information. A DTCH can exist in both up-link and 
down-link. 

The MAC layer maps logical channels with transport channels. One 
of the functions of the MAC sub-layer is to select the appropriate transport 
35 format for each transport channel depending on the momentary source bit 
rate. 
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Figure 7C illustrates mapping between logical channels and 
transport channels. An SCCH is connected to an SCH. A BCCH is connected 
to a BCH. A PCCH is connected to a PCH. A CCCH is connected to a RACH 
and a FACH. A DTCH can be connected to either a RACH and a FACH, to a 
5 RACH and a DSCH, to a DCH and a DSCH, or to a DCH. A DCCH can be 
connected to either a RACH and a FACH, to a RACH and a DSCH, to a DCH 
and a DSCH, to a DCH, or to a FAUSCH. 

The third layer L3 has a RRC sub-layer (Radio Resource Control) 
that handles the control plane signaling of layer three between the user 
10 equipment and the network. Among the functions carried out by the RRC sub- 
layer are assignment, reconfiguration and release of radio resources for the 
RRC connection. So the RRC sub-layer handles the assignment of the radio 
resources required for the RRC connection, including the requirements of both 
the control and the user plane. The RRC layer may reconfigure radio 
15 resources during an established RRC connection. 

In the present invention we are interested in the encryption of the 
different services' data flows of one user. According to the known techniques, 
all data flows would be encrypted using the same ciphering mask. 

The method according to the invention for ciphering data 
20 transmission in a radio system is presented in Figure 6. The performance of 
the method begins in block 600. 

In block 602 a ciphering key is generated according to a known 
technique, for example as described in the Background of the Invention 
section. 

25 In block 604A a ciphering mask is produced in a ciphering algorithm 

using the ciphering key as an input parameter. Also a logical channel specific 
parameter or a transport channel specific parameter is used as an additional 
input parameter to the ciphering algorithm. The logical channel specific 
parameter can be one of the following: a Radio Access Bearer Identifier, a 

30 Logical Channel Identifier, a Signaling Link Identifier, or some other parameter 
identifying the logical channel used. The transport channel specific parameter 
can be, for example, the Dedicated Channel Identifier, or some other 
parameter identifying the transport channel used. 

The term 'bearer' is a high-level name for transmission of 

35 information used in connection with a network service. Depending on the 
services, information in the UMTS can usually be transmitted using one or 



more bearers. The services include, for example, speech transmission, data 
services and video service. A radio bearer, on the other hand, represents that 
part of the bearer which extends over the air interface. One logical channel 
normally carries one radio bearer. A logical channel defines the service offered 
5 by the MAC layer. A logical channel can be mapped to different types of 
transport channels depending on the existing service mode (either to a 
dedicated transport channel or common transport channels). The transport 
channels define the sen/ices offered"by the physical layer. It is also possible to 
multiplex several logical channels into one transport channel in the MAC layer. 

10 The transport channels are further mapped to physical channels in the 
physical layer. Several transport channels can be multiplexed into one 
physical channel by layer 1. It is also possible that after transport channel 
multiplexing the data stream is divided between several physical channels. 

The invention can thus be applied to a radio system whose 

15 terminals can communicate with other transceivers using one or more parallel 
radio bearers. Typically, when a call is established between a terminal and a 
network, a physical channel is first established for a Signaling Radio Bearer 
SRB between the terminal and the radio network subsystem, and once this 
channel has been established, the actual traffic bearer(s) can be established. 

20 The SRB can also be called a signaling link. 

The direction of transmission (up-link / down-link) can be used as 
an additional input parameter to the ciphering algorithm. 

Yet another parameter exists: a radio frame specific parameter can 
be used as an additional input parameter to the ciphering algorithm. The radio 

25 frame specific parameter can be, for example, the User Equipment Frame 
Number (UEFN), or some other parameter identifying the used radio frame. 
The radio frame specific parameter depends on the protocol layer where the 
ciphering function is implemented. If it is implemented in the protocol layer that 
is terminated in the UE and the CN, then a mechanism for conveying the used 

30 frame number to the receiving entity has to be defined. If the ciphering function 
is located in the MAC layer or layer 1 (or some other layer terminated in the 
UE and the node B or the RNC), a frame number at least partly consisting of 
the physical frame number can be used, which means that the used frame 
number need not be signaled with the data. 
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In block 606 ciphered data is produced by applying the ciphering 
mask to plain data, using for exannple the XOR operation as described in 
Table 1 . 

Next, an elaborated example illustrating the implementation of the 
5 ciphering method in the transmitter and in the receiver is explained in 
connection with Figures 4A, 4B and 4C. Only the relevant points will be 
illustrated, but it will be dear for a person skilled in the art how ciphering can 
be performed in various situations for example with different numbers of 
PDUs. 

10 Figure 4A describes a block diagram defining the basic ciphering 

environment defined in this invention. Generating means 408 are used for 
generating a ciphering key 410 according to a known technique. Connected 
with the generating means 408 there is a ciphering algorithm 400 for 
producing ciphering masks 412A, 412B, 412C. The ciphering algorithm uses 

15 the generated ciphering key 410 as an input parameter. The ciphering 
algorithm 400 uses a logical channel specific parameter 402A as an additional 
input parameter. 

In the receiver end, the logical channel specific parameter needed 
for deciphering can be read from an unciphered MAC header, for example 

20 from the C/T-field of the MAC header. The structure of the MAC PDU is 
illustrated in Figure 8. The MAC PDU consists of an optional MAC header 800 
and a MAC Service Data Unit (MAC SDU) 802. Both the MAC header and the 
MAC SDU are of variable size. The content and the size of the MAC header 
800 depend on the type of the logical channel, and in some cases none of the 

25 parameters in the MAC header 800 are needed. The size of the MAC-SDU 
802 depends on the size of the RLC PDU, which is defined during the set-up 
procedure. The MAC header 800 comprises a C/T-field 804. This option allows 
efficient MAC multiplexing of different logical channels (or different instances 
of the same logical channel type) into one transport channel, both into 

30 dedicated transport channels and common transport channels. When this 
method is used, the MAC header is not ciphered, which allows separating the 
different MAC PDUs in the receiver end and which in the common channel 
mode allows reading the RNTl (Radio Network Temporary Identity) field that is 
needed for routing messages to the correct entity in the UTRAN. 

35 Connected with the ciphering algorithm 400 there are ciphering 

means 41 6A, 41 6B, 416C for producing ciphered data 41 8A, 41 8B, 41 8C by 
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applying the ciphering mask 41 2A, 41 2B, 41 2C to the plain data 41 4A, 41 4B, 
414C. As can be seen from Figure 4A, the plain data includes Radio Link 
Control Layer Protocol Data Units from at least two parallel logical- channels, 
and for each logical channel an individual ciphering mask is produced. So in 
5 Figure 4A the ciphering masks 41 2A, 41 2B and 41 2C are all different from 
each other. 

In block 420 the ciphered RLC-PDUs are processed through the 
MAC layer and mapped into one Transport Block Set, i.e. MAC PDU Set. 

Another possible solution is one in which the plain data includes 
10 one Radio Link Control Layer Protocol Data Unit 41 4A from only one logical 
channel, and for said logical channel an individual ciphering mask 412A is 
produced. So the invention also works for the individual logical channel. 

Normally a new ciphering mask is produced for each radio frame of 
the physical layer of the protocol stack. If interleaving is used, then a new 
15 ciphering mask can be produced for each interleaving period of the physical 
layer of the protocol stack. Typically one interleaving period consists of several 
radio frames. 

The left-hand side of Figure 4A represents the operations carried 
out in the transmitter. The corresponding operations will also be carried out in 

20 the receiver, as illustrated on the right-hand side of Figure 4A. The only 
differences are that block 422 is used to derive RLC-PDUs out of the received 
Transport Block Set, and that the deciphering means 424A, 424B, 424C are 
used to decipher the received data. 

In one embodiment of the invention, a Radio Link Control Layer 

25 Protocol Data Unit of at least one logical channel is already ciphered, and the 
step of producing ciphered data is not repeated for said already ciphered 
Radio Link Control Layer Protocol Data Unit. It is thus avoided that the data 
would be ciphered twice. Of course, if for example such end-to-end ciphering 
is used, the data can be ciphered twice: first by the application using the 

30 sen/ice, and then by the MAC layer according to the invention. This will cause 
no loss of transmission capacity, as the XOR operation does not add any extra 
bits, even if it is performed twice. 

Figure 4B illustrates a solution to a situation where the plain data 
includes at least two successive Radio Link Control Layer Protocol Data Units 

35 of one logical channel. If we assume, for example, that the first RLC PDU 
41 4A and the second RLC PDU 414B are from one logical channel, then the 



problem can be solved in such a way that only one ciphering mask 41 2A is 
produced for these PDUs 414A, 414B. Different parts of this ciphering mask 
41 2A are then used for ciphering the first PDU 41 4A and the second PDU 
414B. The length of the required ciphering mask 41 2A in this case is naturally 
5 the sum of the lengths of the first and the second PDU 414A, 414B. Because 
the PDUs 414A, 414B are from the same logical channel (same Radio Access 
Bearer), the maximum length required can be calculated as being two times 
the maximum RLC PDU size of that bearer. 

Figure 4C illustrates a situation where the plain data includes one 

10 Transport Block Set (TBS) including Medium Access Control Layer Protocol 
Data Units of at least two different logicai channels, and for each Transport 
Block Set one ciphering mask 412 is used in producing the ciphered data. In 
this option, the basic unit to be ciphered is a Transport Block Set. This defines 
the required length of the ciphering mask 412 produced by the algorithm 400. 

15 Layer 1 still adds Transport Block specific CRCs (Cyclic Redundancy Check), 
but because the XOR operation does not change the length of data, it should 
be possible to cipher the whole TBS as one unit. The length of each transport 
block in the TBS has to be told to LI anyway. This option has the 
disadvantage that the MAC header is also ciphered, and so the MAC PDUs 

20 cannot be routed anywhere on the network side before the TBS is deciphered. 
This is a problem if common channels over lur are possible. The length of the 
required ciphering mask 412 is equal to the maximum Transport Block Set size 
for the transport channel in question. 

Another possible solution is one in which the plain data includes 

25 one Transport Block Set including a Medium Access Control Layer Protocol 
Data Unit of one logical channel, and for each Transport Block Set one 
ciphering mask is used in producing the ciphered data. 

The solution of the invention is implemented in the radio system 
preferably by software, whereby the invention requires certain functions in the 

30 protocol processing software located in the transmitter and in the receiver, 
especially in blocks 204A, 204B and 226A, 226B of Figure 2A. Thus the 
generating means 408, the ciphering algorithm 400, and the ciphering means 
41 6A, 41 6B, 41 6C can be software modules of the protocol stack residing in 
the user equipment UE and in the radio network subsystem RNS. The solution 

35 can also be implemented with hardware, for example using ASIC (Application 
Specific Integrated Circuit) or discrete components. 
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The method of the invention can be implennented, for example, in 
the Medium Access Control Layer of the protocol stack. This is illustrated in 
Figure 7B, which shows a high-level overview of the MAC layer depicted in 
Figure 7A with ciphering functions included. C1() and C2{) are two alternatives 
5 for the location of ciphering. C1{0), C1(1), C1(2) and C1(3) refer to the use of 
logical channel specific ciphering parameters as explained above with 
reference to Figures 4A and 4B, whereas C2(00), C2(01) and C2(02) refer to 
the use of transport channel specific ciphering parameters. Some MAC 
functions may be needed below C2(00), C2{01) and C2(02) blocks, but for the 

10 sake of clarity they are not illustrated here. Basically the RLC PDUs come to 
the MAC layer from each logical channel. In the MAC layer the RLC-PDUs are 
then mapped to the MAC PDUs in the functional blocks 700, 702, 704, which 
include the operations for the PCH, BCH, SCH, Dedicated Channel and 
Common Channel operations. Normally one RLC PDU is mapped to one MAC 

15 PDU (= Transport Block). This mapping realizes the mapping from a logical 
channel to a transport channel. The mapping rules have been explained above 
in connection with Figure 7C. If ciphering is used for the CCCH then a 
ciphering block, for example CI (4), should be in Figure 70 in the line between 
the 'CCCH' and the functional block 704. 

20 Even though the invention is described above with reference to an 

example shown in the attached drawings, it is apparent that the invention is 
not restricted to it, but can vary in many ways within the inventive idea 
disclosed in the attached claims. 
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CLAIMS 

1 . A method of ciphering data transmission in a radio system, 
comprising: 

(602) generating a ciphering key; 
5 {604A) producing a ciphering mask in a ciphering algorithm using 

the ciphering key as an input parameter; 

(606) producing ciphered data by applying the ciphering mask to 

plain data; 

(604B) using a logical channel specific parameter or a transport 
10 channel specific parameter as an additional input parameter to the ciphering 
algorithm. 

2. The method as claimed in claim 1, further comprising: 

using the direction of transmission as an additional input parameter 
to the ciphering algorithm. 
15 3. The method as claimed in claim 1, wherein the logical channel 

specific parameter is one of the following: a Radio Access Bearer Identifier, a 
Logical Channel Identifier, a Signaling Link Identifier. 

4. The method as claimed in claim 1, wherein the transport channel 
specific parameter is a Dedicated Channel Identifier. 
20 5. The method as claimed in claim 1 , further comprising: 

using a radio frame specific parameter as an additional input 
parameter to the ciphering algorithm. 

6. The method as claimed in claim 5, wherein the radio frame 
specific parameter is a User Equipment Frame Number. 
25 7. The method as claimed in claim 1, wherein the plain data 

includes Radio Link Control Layer Protocol Data Units from at least two 
parallel logical channels, and for each logical channel an individual ciphering 
mask is produced. 

8. The method as claimed in claim 7, wherein a Radio Link Control 
30 Layer Protocol Data Unit of at least one logical channel is already ciphered, 

and the step of producing ciphered data Is not repeated for said already 
ciphered Radio Link Control Layer Protocol Data Unit. 

9. The method as claimed in claim 1, wherein the plain data 
includes one Radio Link Control Layer Protocol Data Unit from one logical 

35 channel, and for said logical channel an individual ciphering mask is produced. 
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10. The method as claimed in claim 1, wherein the plain data 
includes at least two successive Radio Link Control Layer Protocol Data Units 
of one logical channel, and for each Radio Link Control Layer Protocol Data 
Unit a different part of the ciphering mask is used in producing the ciphered 

5 data. 

1 1 . The method as claimed in claim 1 , wherein the plain data 
includes one Transport Block Set including Medium Access Control Layer 
Protocol Data Units of at least two different logical channels, and for each 
Transport Block Set one ciphering mask is used in producing the ciphered 

10 data. 

12. The method as claimed in claim 1, wherein the plain data 
includes one Transport Block Set including a Medium Access Control Layer 
Protocol Data Unit of one logical channel, and for each Transport Block Set 
one ciphering mask is used in producing the ciphered data. 

15 13. The method as claimed in claim 1, wherein the ciphering is 

performed in the Medium Access Control Layer of a protocol stack. 

14. The method as claimed in claim 1, wherein a new ciphering 
mask is produced for each radio frame of the physical layer of the protocol 
stack. 

20 15. The method as claimed in claim 1, wherein a new ciphering 

mask is produced for each interleaving period of the physical layer of the 
protocol stack. 

16. A user equipment (UE), comprising: 

generating means (408) for generating a ciphering key (410); 
25 a ciphering algorithm (400) connected with the generating means 

(408) for producing a ciphering mask (41 2A, 41 2B, 41 2C) using the ciphering 
key (410) as an input parameter; 

ciphering means (41 6A, 41 6B, 41 6C) connected with the ciphering 
algorithm (400) for producing ciphered data (41 8A, 41 88, 41 8C) by applying 
30 the ciphering mask (412A, 412B, 412C) to plain data (414A, 414B, 414C); 

the ciphering algorithm (400) uses a logical channel specific 
parameter (402A) or a transport channel specific parameter (402B) as an 
additional input parameter. 

17. The user equipment as claimed in claim 16, wherein the 
35 ciphering algorithm (400) uses the direction of transmission as an additional 

input parameter. 
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18. The user equipment as claimed in claim 16, wherein the logical 
channel specific parameter (402A) is one of the following: a Radio Access 
Bearer Identifier, a Logical Channel Identifier, a Signaling Link Identifier. 

19. The user equipment as claimed in claim 16, wherein the 
5 transport channel specific parameter (402B) is a Dedicated Channel Identifier. 

20. The user equipment as claimed in claim 16, wherein the 
ciphering algorithm (400) uses a radio frame specific parameter (404) as an 
additional input parameter. 

21. The user equipment as claimed in claim 20, wherein the radio 
10 frame specific parameter (404) is a User Equipment Frame Number. 

22. The user equipment as claimed in claim 16, wherein the 
ciphering means (416A, 416B, 416C) accept plain data (414A, 414B, 414C) 
including Radio Link Control Layer Protocol Data Units from at least two 
parallel logical channels, and the ciphering algorithm (400) produces for each 

15 logical channel an individual ciphering mask (412A, 412B, 412C), and the 
ciphering means (416A, 416B, 416C) use for each logical channel the 
ciphering mask (41 2A, 41 2B, 41 2C) of said channel. 

23. The user equipment as claimed in claim 22, wherein a Radio 
Link Control Layer Protocol Data Unit (41 4C) of at least one logical channel is 

20 already ciphered, and the ciphering means (41 6C) do not cipher said already 
ciphered Radio Link Control Layer Protocol Data Unit (414C). 

24. The user equipment as claimed in claim 16, wherein the 
ciphering means (41 6A) accept plain data (414A) including a Radio Link 
Control Layer Protocol Data Unit from one logical channel, and the ciphering 

25 algorithm (400) produces for said logical channel an individual ciphering mask 
(41 2A), and the ciphering means (41 6A) use for said logical channel the 
ciphering mask (41 2A) of said channel. 

25. The user equipment as claimed in claim 16, wherein the 
ciphering means (426) accept plain data including at least two successive 

30 Radio Link Control Layer Protocol Data Units of one logical channel, and the 
ciphering algorithm (400) produces for said logical channel an individual 
ciphering mask (41 2A), and the ciphering means (426) use for each Radio 
Link Control Layer Protocol Data Unit different part of the ciphering mask 
(41 2A). 

35 26. The user equipment as claimed in claim 16, wherein the 

ciphering means (434) accept plain data including one Transport Block Set 
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including Medium Access Control Layer Protocol Data Units of at least two 
different logical channels, and the ciphering algorithm (400) produces for each 
Transport Block Set an individual ciphering mask (412), and the ciphering 
means (434) use for each Transport Block Set one ciphering mask (412). 
5 27. The user equipment as claimed in claim 16, wherein the 

ciphering means (434) accept plain data including one Transport Block Set 
including a Medium Access Control Layer Protocol Data Unit of one logical 
channel, and the ciphering algorithm (400) produces for each Transport Block 
Set an individual ciphering mask (412), and the ciphering means (434) use for 
10 each Transport Block Set one ciphering mask (412). 

28. The user equipment as claimed in claim 16, wherein the 
generating means (408), the ciphering algorithm (400), and the ciphering 
means (416A, 416B, 416C) reside in the Medium Access Control Layer of a 
protocol stack. 

15 29. The user equipment as claimed in claim 16, wherein the 

ciphering algorithm (400) produces a new ciphering mask (41 2A, 41 2B, 412C) 
for each radio frame of the physical layer of the protocol stack. 

30. The user equipment as claimed in claim 16, wherein the 
ciphering algorithm (400) produces a new ciphering mask (412A, 412B, 412C) 

20 for each interleaving period of the physical layer of the protocol stack. 

31. A radio network subsystem (RNS), comprising; 
generating means (408) for generating a ciphering key (410); 

a ciphering algorithm (400) connected with the generating means 
(408) for producing a ciphering mask (41 2A, 41 2B, 41 2C) using the ciphering 
25 key (410) as an input parameter; 

ciphering means (416A, 416B, 416C) connected with the ciphering 
algorithm (400) for producing ciphered data (41 8A, 41 8B, 41 8C) by applying 
the ciphering mask (412A, 412B, 412C) to plain data (414A, 414B, 414C); 

the ciphering algorithm (400) uses a logical channel specific 
30 parameter (402A) or a transport channel specific parameter (402B) as an 
additional input parameter. 

32. The radio network subsystem as claimed in claim 31, wherein 
the ciphering algorithm (400) uses the direction of transmission as an 
additional input parameter. 

35 33. The radio network subsystem as claimed in claim 31, wherein 

the logical channel specific parameter (402A) is one of the following: a Radio 
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Access Bearer Identifier, a Logical Channel Identifier, a Signaling Link 
Identifier. 

34. The radio network subsystem as claimed in claim 31, wherein 
the transport channel specific parameter (402B) is a Dedicated Channel 

5 Identifier. 

35. The radio network subsystem as claimed in claim 31, wherein 
the ciphering algorithm (400) uses a radio frame specific parameter (404) as 
an additional input parameter. 

36. The radio network subsystem as claimed in claim 35, wherein 
10 the radio frame specific parameter (404) is a User Equipment Frame Number. 

37. The radio network subsystem as claimed in claim 31, wherein 
the ciphering means (416A, 416B, 416C) accept plain data (414A, 414B, 
4140) including Radio Link Control Layer Protocol Data Units from at least two 
parallel logical channels, and the ciphering algorithm (400) produces for each 

15 logical channel an individual ciphering mask (412A, 412B, 412C), and the 
ciphering means (416A, 416B, 416C) use for each logical channel the 
ciphering mask (412A, 412B, 412C) of said channel. 

38. The radio network subsystem as claimed in claim 37, wherein a 
Radio Link Control Layer Protocol Data Unit (41 4C) of at least one logical 

20 channel is already ciphered, and the ciphering means (41 6C) do not cipher 
said already ciphered Radio Link Control Layer Protocol Data Unit (41 4C). 

39. The radio network subsystem as claimed in claim 31, wherein 
the ciphering means (41 6A) accept plain data (414A) including a Radio Link 
Control Layer Protocol Data Unit from one logical channel, and the ciphering 

25 algorithm (400) produces for said logical channel an individual ciphering mask 
(41 2A), and the ciphering means (41 6A) use for said logical channel 
theciphering mask (412A) of said channel. 

40. The radio network subsystem as claimed in claim 31, wherein 
the ciphering means (426) accept plain data including at least two successive 

30 Radio Link Control Layer Protocol Data Units of one logical channel, and the 
ciphering algorithm (400) produces for said logical channel an individual 
ciphering mask (41 2A), and the ciphering means (426) use for each Radio 
Link Control Layer Protocol Data Unit a different part of the ciphering mask 
(412A). 

35 41 . The radio network subsystem as claimed in claim 31 , wherein 

the ciphering means (434) accept plain data including one Transport Block Set 



including Medium Access Control Layer Protocol Data Units of at least two 
different logical channels, and the ciphering algorithm (400) produces for each 
Transport Block Set an individual ciphering mask (412), and the ciphering 
means (434) use for each Transport Block Set one ciphering mask (412). 
5 42. The radio network subsystem as claimed in claim 31 , wherein 

the ciphering means (434) accept plain data including one Transport Block Set 
including a Medium Access Control Layer Protocol Data Unit of one logical 
channel, and the ciphering algorithm (400) produces for each Transport Block 
Set an individual ciphering mask (412), and the ciphering means (434) use for 
10 each Transport Block Set one ciphering mask (412). 

43. The radio network subsystem as claimed in claim 31, wherein 
the generating means (408), the ciphering algorithm (400), and the ciphering 
means (416A, 416B, 41 6C) reside in the Medium Access Control Layer of a 
protocol stack. 

15 44. The radio network subsystem as claimed in claim 31, wherein 

the ciphering algorithm (400) produces a new ciphering mask (41 2A, 41 2B, 
41 2C) for each radio frame of the physical layer of the protocol stack. 

45. The radio network subsystem as claimed in claim 31, wherein 
the ciphering algorithm (400) produces a new ciphering mask (41 2A, 41 2B, 

20 41 2C) for each interleaving period of the physical layer of the protocol stack. 



ABSTRACT 



The invention relates to a method of ciphering data 
transmission in a radio system, and to a user equipment 
using the method, and to a radio network subsystem using 
the method. The method includes the steps of: (602) 
generating a ciphering key; (604A) producing a ciphering 
mask in a ciphering algorithm using the ciphering key as 
an input parameter; (604B) using a logical channel 
specific parameter or a transport channel specific 
parameter as an additional input parameter to the 
ciphering algorithm; and (606) producing ciphered data by 
applying the ciphering mask to plain data. 
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(check the following item, if applicable) 

□ 1 hereby appoint the practitioner(s) associated wfth the Customer Number pro- 
vided below to prosecute this appiication and to transact all business in the 
Patent and Trademark Office connected therewith. 

□ Attached, as part of this declaration and power of attorney, is the authorization 
of the above-named practitioner(s) to accept and foliow instructions from my 
representative(s). 



SEND CORRESPONDENCE TO DIRECT TELEPHONE CALLS TO: 

(Name and telephone number) 

51 Address 

Clarence A. Green Clarence A. Green 

PERMAN & GREEN, LLP (^^3) 259-lSOO 

425 Post Road 
Fairfield, CT 06430 

□ Customer Number . — . 
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DECLARATION 



i hereby declare that alt statements made herein of my awn knowledge are true and that 
ail statements made on infonnation and belief are believed to be true; and further that these 
statements were made with the knowledge that willful false statements and the like so made 
are punishable by fine or imprisonment, or both, under Section 1 001 of Title 1 8 of the United 
States Code, and that such willful false statements may jeopardize the validity of the 
application or any patent issued therson. 

SIGNATURE{S) 

NOTE: Csrgfully indicate She family for last) name, as it should appear an the filing mcaipt and all other 
docitmants. 

Full name of sole or first inventor 

Jukka Vialen 

iCNEN SAME) _J (MIDDLE INlTLAi OR NAMSj FAMILY (Oft LAST HAME) 

Inventor's signature y/u4^ 

Date 7.2.2000 ^ Country of Citizenship Finland 

Residence Espoo, Finland 

Post Office Address Tyrskykuja 3 B 13, FIN-02320 Espoo, Finland 



Full name of second joint Inventor, if any 

Fabio Longoni 

(ajVE/4 NAME) (MIDDLE INmAL. OR NAME) FAMILY (Oft L45T NAME) 

Inventor's signature . 

Date 7.2.2000 Country^f Citi^^n^hip ^^aly 

Residence Espoo, Finland 

Post Office Address Visamaki 5 E 38, FIN-02130 Espoo, Finland 



Full name of third joint inventor, if any 

Ca/VSV HAME) (MIODL£ INITIAL Off NAME} FAMILY (OR LAST NAME) 

inventor's signature 

Date Country of Citizenship 

Residence . 

Post Office Address 
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(check proper box(es) for any of the following added page(s) 
that form a part of this declaration) 

□ Signature for fourth and subsequent joint inventors. Number of pages added 



□ Signature by administrator(trix), executor(trtx) or legal representative for de- 
ceased or incapacitated inventor. Number of pages added 



□ Signature for inventor who refuses to sign or cannot be reached by person 
authorized under 37 CFR 1.47. Number of pages added 



□ Added page for signature by one joint inventor on behaif of deceased inventorts) 
where legal representative cannot be appointed in time. (37 CFR 1.47) 

□ Added pages to combined declaration and power of attorney for divisional, 
continuation, or continuation-in-part (C-l-P) application. 

□ Number of pages added 



□ Authorization of practitioner(s) to accept and follow instructions from representa- 
tive. 



(if no further pages form a part of this Declaration, 
then end this Declaration with this page and check the following item) 

S This declaration ends with this page. 
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